Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JR2_ei5j4qUuhnagxHEUdWiITGc.roa
File: JR2_ei5j4qUuhnagxHEUdWiITGc.roa (raw, json)
Hash identifier: 8OEkOuWsNWjawhvW2HNDO0d2TVFk6DmK821N3ZJS6Og=
Subject key identifier: 25:1D:BF:7A:2E:63:E2:A5:2E:86:76:A0:C4:71:14:75:68:88:4C:67
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A019E05BEA8C2A45C6CA85DDB69F5DCCCA
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JR2_ei5j4qUuhnagxHEUdWiITGc.roa
Signing time: Wed 19 Aug 2026 11:55:28 +0000
ROA not before: Wed 19 Aug 2026 11:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203446
IP address blocks: 89.213.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:e0:5b:ea:8c:2a:45:c6:ca:85:dd:b6:9f:5d:cc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 19 11:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=251dbf7a2e63e2a52e8676a0c471147568884c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:9b:52:05:63:06:94:ff:42:57:0f:57:f7:
ed:a9:6d:15:e9:43:89:d0:95:c7:c6:83:3b:01:2f:
4b:96:d9:86:2a:19:ca:ad:ba:71:93:ad:a8:bd:5f:
a6:d2:5c:91:47:e3:85:c0:e8:61:99:66:38:f2:da:
be:27:eb:cf:b4:2b:3f:dd:78:da:4b:06:22:87:85:
fc:b4:e6:68:8b:fe:29:e4:53:40:24:55:5a:55:be:
49:15:b4:35:0d:7b:f8:f7:03:da:35:05:99:9d:ed:
0c:95:df:50:1d:0d:f9:bf:fe:3c:df:9d:e9:7c:5c:
e5:f3:a0:98:2d:1d:f5:0d:9c:77:f0:af:57:0f:52:
91:9e:25:99:ca:e4:9b:d4:a8:08:9f:c8:05:3c:5d:
96:b2:75:14:0d:71:5b:de:28:f9:01:bf:0f:09:98:
3c:3d:12:9b:2e:51:56:68:7c:76:95:d4:e5:20:c4:
93:45:7a:3e:3a:65:05:0e:d9:71:8d:90:4b:48:6d:
26:d2:bc:97:4e:12:4e:52:d8:26:eb:bc:35:e0:98:
bc:84:f2:20:49:26:69:8f:b8:1d:f4:45:aa:9b:4f:
be:a0:83:69:bb:31:6c:f3:b8:ed:7a:ef:76:13:95:
2f:4d:f0:d1:32:1a:93:2a:e7:aa:71:a2:83:f6:86:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:BF:7A:2E:63:E2:A5:2E:86:76:A0:C4:71:14:75:68:88:4C:67
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JR2_ei5j4qUuhnagxHEUdWiITGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.171.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6f:e4:44:a1:37:59:e5:a2:bb:56:62:b1:8f:c6:a2:e3:7b:
b4:c3:9e:13:c1:16:de:71:09:56:66:f0:25:33:01:5c:ae:2a:
31:9d:95:53:cb:86:4c:c5:25:be:79:36:75:2e:0d:03:02:5f:
b8:d3:a4:a3:d3:3f:05:eb:42:79:22:db:5b:c7:7b:93:65:6d:
3b:6f:85:af:41:68:84:c7:34:0b:b5:d0:e7:bf:74:cb:95:b5:
3e:77:41:3a:bd:8f:40:09:0e:a8:02:fe:b6:a2:91:5e:62:53:
cb:89:ba:f4:2e:9a:a8:98:8a:12:13:c5:e0:2e:d0:d1:94:14:
1a:81:9b:ef:3a:72:25:aa:e1:0f:22:83:de:de:aa:93:f8:ee:
8f:98:c7:21:44:8b:71:dd:7a:93:e8:10:2f:79:1d:f8:b4:6c:
e4:71:3c:71:11:60:b8:a2:77:dc:83:65:38:e8:f5:89:77:73:
52:5c:4a:af:95:d0:b3:e2:cf:71:e9:ac:b4:c5:ed:d7:b1:1c:
26:ba:10:94:29:0c:97:ff:12:74:a5:bd:93:db:6b:83:3e:f7:
2e:c7:9f:e2:6e:62:e4:96:95:c9:96:36:db:9d:03:8e:05:f1:
1f:7a:68:4b:05:c9:c9:c2:9f:1e:f6:6a:ab:96:13:cf:04:09:
1d:53:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:31 2026 by rpki-client